huawei-cloud-billing-scout

• Outcome: Review
• Latest audit: Sep 3, 2026 · 12:10 PM UTC
• Version: 1.0.1

Overview

The skill is mostly a read-only Huawei Cloud billing helper, but its installation guide recommends running unverified latest remote installers with optional sudo and non-interactive execution.

Review the installation guide carefully before use. Prefer an already trusted hcloud installation or verify installer provenance, version, and checksum/signature before executing it; avoid non-interactive -y and sudo bash unless you understand the impact. Use a read-only Huawei Cloud IAM profile, expect the skill to query sensitive billing data from the current hcloud profile, and avoid sharing raw output, credentials, full IDs, or profile details.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults

Findings (39)

Ae1

High

• Category: analysis-evasion

Content

`SKILL.md` defines behavior; `semantic/catalog.yml` defines entry points and required context; `semantic/billing-ontology.yml` defines facts, grains, money_basi

• Confidence: 100% confidence
• Finding: Referenced artifact was not completely inspected

External Script Fetching

High

• Category: Supply Chain

Content

### One-click Installation
```bash
# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

• Confidence: 99% confidence
• Finding: The guide instructs users to fetch a shell script from the network and execute it immediately with `bash`. This is a high-risk software supply-chain pattern because any compromise of the hosting bucket, DNS/TLS path, or script publisher results in arbitrary code execution on the user's machine.

External Script Fetching

High

• Category: Supply Chain

Content

### One-click Installation
```bash
# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

• Confidence: 99% confidence
• Finding: The guide instructs users to fetch a shell script from the network and execute it immediately with `bash`. This is a high-risk software supply-chain pattern because any compromise of the hosting bucket, DNS/TLS path, or script publisher results in arbitrary code execution on the user's machine.

External Script Fetching

High

• Category: Supply Chain

Content

### One-click Installation
```bash
# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

• Confidence: 99% confidence
• Finding: The guide instructs users to fetch a shell script from the network and execute it immediately with `bash`. This is a high-risk software supply-chain pattern because any compromise of the hosting bucket, DNS/TLS path, or script publisher results in arbitrary code execution on the user's machine.

External Script Fetching

High

• Category: Supply Chain

Content

### One-click Installation
```bash
# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

• Confidence: 99% confidence
• Finding: The guide instructs users to fetch a shell script from the network and execute it immediately with `bash`. This is a high-risk software supply-chain pattern because any compromise of the hosting bucket, DNS/TLS path, or script publisher results in arbitrary code execution on the user's machine.

External Script Fetching

High

• Category: Supply Chain

Content

#### Custom Image
```dockerfile
FROM ubuntu:latest
RUN apt-get update -y && apt-get install curl -y
RUN curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
WORKDIR /workspace
ENTRYPOINT ["/usr/local/bin/hcloud"]

• Confidence: 97% confidence
• Finding: The Dockerfile bakes a remote installer script directly into an image build and executes it without verification. This extends the same supply-chain risk into CI/CD pipelines, where compromise could poison built images and downstream deployments at scale.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

### Uninstall KooCLI
```bash
# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

• Confidence: 86% confidence
• Finding: `sudo rm -f /usr/local/bin/hcloud` deletes a single installed binary as part of documented uninstallation. This is not malicious, but it is a genuinely destructive command that can be harmful if copied carelessly or if the path is altered; the missing warnings make it a minor but real safety issue.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

```bash
# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:

• Confidence: 90% confidence
• Finding: `sudo rm -rf /usr/local/hcloud/` recursively deletes the application's installation directory. While this is legitimate uninstallation behavior, recursive root deletion is operationally risky if the path is mistyped or copied into the wrong context.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

```bash
# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:

• Confidence: 90% confidence
• Finding: `sudo rm -rf /usr/local/hcloud/` recursively deletes the application's installation directory. While this is legitimate uninstallation behavior, recursive root deletion is operationally risky if the path is mistyped or copied into the wrong context.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:
# 1. Delete hcloud.exe file

• Confidence: 91% confidence
• Finding: This command deletes the user's entire `.hcloud` directory, likely including profiles and credentials. Because the skill concerns cloud billing operations, wiping these artifacts can impede account access and remove locally stored context important for multi-environment work.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:
# 1. Delete hcloud.exe file

• Confidence: 91% confidence
• Finding: This command deletes the user's entire `.hcloud` directory, likely including profiles and credentials. Because the skill concerns cloud billing operations, wiping these artifacts can impede account access and remove locally stored context important for multi-environment work.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

# Linux/macOS manual uninstallation:
sudo rm -f /usr/local/bin/hcloud
sudo rm -rf /usr/local/hcloud/
rm -rf ~/.hcloud/

# Windows manual uninstallation:
# 1. Delete hcloud.exe file

• Confidence: 91% confidence
• Finding: This command deletes the user's entire `.hcloud` directory, likely including profiles and credentials. Because the skill concerns cloud billing operations, wiping these artifacts can impede account access and remove locally stored context important for multi-environment work.

Tool Parameter Abuse

High

• Category: Tool Misuse

Content

### Clean Cache
```bash
# Clean KooCLI cache
rm -rf ~/.hcloud/cache/

# Clean downloaded files
rm -f hcloud_install.sh huaweicloud-cli-*.tar.gz huaweicloud-cli-*.zip

• Confidence: 90% confidence
• Finding: This recursive cache deletion is less severe than deleting the full config tree, but it still uses a forceful destructive pattern without path-safety guidance. Users may misread or modify the command, causing broader deletion than intended.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: The file states `Run hcloud configure set --cli-lang=cn — BSS requires Chinese mode`, which is a natural-language locale requirement. This conflicts with the policy category for language/locale violations because it mandates a specific language setting rather than offering a user choice or clearly documenting an opt-in flow.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

## Verification Path

**Huawei Cloud Gate** — Before matching in `catalog.yml`: if user has not indicated Huawei Cloud / BSS / this skill's billing scope, and cannot be determined from conversation as the Huawei Cloud account for current `hcloud` profile, **first ask one confirmation** "Query current configured Huawei Cloud account and billing period?"; without confirmation, no BSS query execution. Non-Huawei Cloud or other cloud vendor billing → only state out of scope, no evidence gathering.

|Phase|Task|Reference File|Forbidden|
|---|---|---|---|

• Confidence: 75% confidence
• Finding: Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The documentation instructs users to download and immediately execute a remote shell script, including a non-interactive `-y` mode, without any warning to review or verify the script first. This creates a classic supply-chain execution risk: if the remote host, transport path, or script content is compromised, users will run attacker-controlled code directly on their systems.

External Transmission

Medium

• Category: Data Exfiltration

Content

### One-click Installation
```bash
# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y

• Confidence: 60% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Autonomous Decision Making

Medium

• Category: Excessive Agency

Content

# Download and run official installation script (interactive)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh

# Non-interactive installation (skip confirmation)
curl -sSL https://cn-north-4-hdn-koocli.obs.cn-north-4.myhuaweicloud.com/cli/latest/hcloud_install.sh -o ./hcloud_install.sh && bash ./hcloud_install.sh -y
```

• Confidence: 90% confidence
• Finding: The non-interactive `-y` installation example suppresses user confirmation and encourages unattended execution of a remote installer. In combination with direct script execution, this reduces opportunities for review and makes accidental or malicious changes more likely to proceed without user awareness.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 75% confidence
• Finding: Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 75% confidence
• Finding: Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 75% confidence
• Finding: Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 75% confidence
• Finding: Docker image references without a specific tag (:latest is implicit) or digest (@sha256:...) can be silently replaced by a malicious image.

Session Persistence

Medium

• Category: Rogue Agent

Content

### Multi-environment Configuration
```bash
# Create development environment configuration
hcloud configure init --cli-profile dev

# Create test environment configuration

• Confidence: 60% confidence
• Finding: Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

#### Insufficient Permissions
```bash
# Linux/macOS: Use sudo
sudo bash ./hcloud_install.sh

# Or install to user directory

• Confidence: 83% confidence
• Finding: The guide recommends `sudo bash ./hcloud_install.sh`, which runs the entire installer with root privileges. Because the installer is obtained remotely elsewhere in the guide, this magnifies the impact of any compromise or mistake to full-system code execution.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

#### Insufficient Permissions
```bash
# Linux/macOS: Use sudo
sudo bash ./hcloud_install.sh

# Or install to user directory

• Confidence: 83% confidence
• Finding: The guide recommends `sudo bash ./hcloud_install.sh`, which runs the entire installer with root privileges. Because the installer is obtained remotely elsewhere in the guide, this magnifies the impact of any compromise or mistake to full-system code execution.

VirusTotal

VirusTotal findings are pending for this skill version.

Static analysis

Detected: suspicious.destructive_delete_command

Documentation contains a destructive delete command without an explicit confirmation gate.

Warn

• Code: suspicious.destructive_delete_command
• Location: references/cli-installation-guide.md:212